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The application hereby incorporates by reference the disclosures 
of Zhigang Fan, "Anti-counterfeit pattern detector and method/' U.S. Patent 
No. 5,553,144; Zhigang Fan, et. al., "Seal detection system and method," U.S. 
Patent No. 6,067,374; Zhigang Fan, et. al., "Method for counterfeit currency 
5 detection using orthogonal line comparison," U.S. Patent No. 6,181,813 B1, 
John W. Wu, et.al., "Anti-counterfeit detection method," U.S. Patent No. 
6,317,524, and, John W. Wu, et. al., " Digital imaging method and apparatus 
for detection of document security marks," U.S. Patent No. 6,542,629, 
verbatim and with the same effect as though such disclosures were fully and 
10 completely set forth herein. 

BACKGROUND OF THE INVENTION 
It is often desirable to send an electronic message that includes 
one or more components. By way of example, it is common to send an 
electronic mail message that consists of a short text message, and to include 
as part of the electronic mail message a more complex document such as a 
15 Mircosoft Word™ or Microsoft Powerpoint™ presentation. Word™ and 
PowerPoint™ are trademarks registered to Microsoft Corporation, One 
Microsoft Way, Redmond Washington, 98052. This provides a convenient way 
of sending a complex formatted document from a sender to one or more 
recipients. 

20 However, this common practice of sending large attachments 

can have the impact of burdening the communications infrastructure used to 
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send or transmit the messages. This increased burden can raise the cost and 
degrade the performance of the communications infrastructure. Malicious 
individuals have also been known to send harmful data or programs to 
unsuspecting recipients; such harmful data or programs are often referred to 
5 as viruses. These viruses can cause damage to data, programs or other items 
resident in the communications infrastructure, or otherwise degrade the 
performance of the communications infrastructure. Further, there is increased 
concern within enterprises for the security of enterprise information. These 
security concerns may relate to controlling the distribution of enterprise 

10 confidential information, or protecting the privacy of clients of the enterprise, 
such as by restricting the circulation of client health or financial information. 
Additionally, there is increased concern within enterprises that the enterprise 
communications infrastructure is used only for the transmission of messages 
and attachments legitimately related to the mission of the enterprise. By way 

15 of example, an enterprise may want to restrict or prohibit the transmission of 
attachments such as vacation pictures, digital greeting cards, or games. 

Therefore, there is a need for an improved system and method 
for sending messages with attachments in a communications infrastructure. 

SUMMARY OF THE INVENTION 
In a first aspect of the invention there is a computer program 

20 arranged to process a first message, the first message comprising a first data 
object, the process based on a method comprising: forming a second data 
object based on the first data object, the second data object to be stored in a 
storage device at a storage address; forming a reference information based 
upon the storage address; and, forming a second message comprising the 

25 reference information and devoid of at least part of the first data object. 

In a second aspect of the invention there is a sending device arranged 
to process a first message including a first data object based on a method 
comprising: forming a second data object based upon the first data object, the 
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second data object to be stored in storage device at a storage address; 
forming a reference information based on the storage address and, forming a 
second message comprising the reference information and devoid of at least 
part of the first data object. 
5 In a third aspect of the invention there is a method to distribute a first 

message containing a first data object to a recipient, comprising: by a device, 
determining when the first data object is greater than a specified threshold; by 
a device, forming a second data object wherein at least a portion of the 
content of the second data object is equivalent to the content of the first data 

10 object, and storing the second data object in a storage device at a storage 
address when the first data object is greater than the specified threshold; by a 
device, forming a second message without at least a portion of the first data 
object, and forming within the second message a reference information based 
on the storage address when the first data object is greater than the specified 

15 threshold; and, by a device, sending the second message to the recipient; 

In a fourth aspect of the invention there is a system comprising a 
receiving device, a storing device and a sending device, wherein the sending 
device is arranged to process a first message including a first data object 
based on a method comprising: forming a second data object based upon the 

20 first data object, the second data object to be stored in a storage device at a 
storage address; forming a reference information based on the storage 
address and, forming a second message comprising the reference information 
and devoid of at least part of the first data object; and where the receiving 
device, a storing device and sending device are arranged to be coupled to a 

25 communications network. 

BRIEF DESCRIPTION OF THE DRAWINGS 
FIG. 1 is a block diagram depicting a system 100 for sending a 
message in accordance with the current invention. System 100 is also suitable 
for a method of sending a message in accordance with the current invention. 



System 100 comprises a sending device 103, for sending a message 104, 
comprising first data object 105, to recipient 102. Sending device 103, forms a 
second data object 105', the second data object 105' stored in storage device 
109 at a storage address. Sending device 103 forms a second message 104' 
5 devoid of at least part of first data object 105 and comprising a reference 
information 110 based upon the storage address. Recipient 102 receives and 
reads second message 104', and retrieves the data object 105' from the 
electronic repository making use of the reference information 110, 

FIG. 2 depicts a representative embodiment of the sending device 
10 (reference FIG. 1, 103) and program 106 in accordance with the current 
invention, wherein the sending device (reference FIG. 1, 103) comprises a 
message client 200. Program (reference FIG 1, 106) comprises a message 
client program 210 in operative communication with a plug-in program 220. 

FIG. 3 depicts an alternate embodiment of the sending device 
15 (reference FIG. 1, 103) and program (reference FIG. 1, 106) wherein, the 
sending device 300 comprises a message client 310 in operative 
communication with a message server 320 via network 31 1 . 

FIG, 4 depicts one embodiment of a method for sending a message in 
accordance with the invention. 
,20 FIG. 5 depicts one embodiment of a method by which the recipient 

(reference FIG. 1, 102) receives the second message; reads the second 
message and retrieves the data object (reference FIG. 1, 105') from the 
electronic repository (reference FIG. 1, 109); in accordance with the invention. 
FIG. 6 depicts an alternate embodiment of a method for sending a 
25 message in accordance with the current invention. 

DETAILED DESCRIPTION OF THE INVENTION 
Referring to FIG. 1, there is shown a block diagram depicting a system 
100 for sending a message. System 100 is also suitable for a method of 
sending a message in accordance with the current invention. System 100 
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comprises a sending device 103, responsive to sender 101 for sending a 
message to recipient 102. Message 104, comprising data object 105 is 
resident upon sending device 103 and accessible for data processing by 
computer program 106 via communications pathway 107. Sending device 103, 
5 forms a second data object 105', based on the first data object 105, the 
second data object 105' stored in storage device 109 at a storage address. 
Sending device 103, further forms a reference information 110 based upon the 
storage address; and, forms a second message 104' comprising the reference 
information 110 and devoid of at least part of the first data object 105. In one 

10 representative embodiment of the invention, the threshold used by program 
106 is communicated by optional network threshold policy component 120 as 
optional network threshold policy 121 via communications pathway 111-122. 
Recipient 102 receives and reads second message 104', and retrieves the 
data object 105' from the electronic repository making use of the reference 

15 information 110. Optionally, sending device 103 determines when data object 
105 is smaller than a threshold, and in response thereto, sends the first 
message 104, comprising the first data object 105, to recipient 102. Optionally, 
code scanning component 130 may analyze stored data object 105' to 
determine if data processing steps are to be applied to data object 105'. 

20 Examples of analysis performed by optional code scanning component 130 
include determining if stored data object 105' comprises a computer virus, an 
image file or confidential information. 

Still referring to FIG. 101, in one embodiment, sending device 103 
determines if the size of first message 104, exceeds a threshold. The sending 

25 device 103, forms the second data object 105', reference information, and 
second message 104' only when the size of the first data object exceeds the 
threshold. Several mechanisms may be used to establish the value of the 
threshold. In one embodiment the value of the threshold is transmitted to the 
sending device 103 by a network threshold policy component 120 in operative 
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communication with the sending device 103 via communications pathway 11 1- 
122. In one embodiment the network threshold policy component 120 is a 
server. The network threshold policy component 120 transmits a data 
message, the network policy threshold 121, providing the sending device 103, 
5 with the value of the threshold to be used in the determination. Methods for 
communicating data messages via a communications network are well known 
to those skilled in the art. 

Still referring to FIG. 1, sending device 103, responsive to sender 101, 
forms a second data object based on the first data object 105, the second data 

10 object to be stored in a storage device 109 at a storage address as a stored 
data object 105'. The second data object may comprise all or portions of the 
first data object 105. In one embodiment, the stored data object 105' is a 
replica of first data object 105. In an alternate embodiment, stored data object 
105' is an encrypted version of the first data object 105\ In yet a further 

1 5 embodiment, the stored object 1 05' is a partial replica of first data object 1 05. 

Still referring to FIG. 1, in one embodiment storage device 109 is a file 
server, In an alternate embodiment, storage device 109 is a Docushare™ 1 
server, available from Xerox Corporation 800 Long Ridge Road Stamford 
Connecticut 06904. server. Docushare™ is a trademark registered to Xerox 

20 Corporation, P.O. Box 1600 800 Long Ridge Road Stamford Connecticut 
06904. In an alternate embodiment storage device 109 is a Sharepoint™ 
server, available from Microsoft Corporation, One Microsoft Way Redmond, 
Washington 980526399. Sharepoint™ is a trademark registered to Microsoft 
Corporation, One Microsoft Way Redmond, Washington 980526399. In 

25 another embodiment, storage device 109 is a Lotus Notes™ server, available 
from Lotus Notes Development Corporation, 55 Cambridge Parkway, 
Cambridge Massachusetts, 02142. Lotus Notes™ is a trademark registered to 
Lotus Notes Development Corporation, 55 Cambridge Parkway, Cambridge 
Massachusetts, 02142. 
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Again referring to FIG. 1, the sending device 103 forms a reference 
information 110 based upon the storage address; and, forms a second 
message 104' comprising the reference information 110 and devoid of at least 
part of the first data object 105. Numerous methods for specifying the storage 
5 address of a data object on a storage device are well known to those skilled in 
r the art. In one embodiment the storage address is a Universal Resource 
Locator (URL). 

Still referring to FIG. 1, optionally, sending device 103 establishes 
access rights for data object 105' stored on storage device 109 restricting 

10 access to data object 105'. Multiple methods of establishing access rights are 
well known to those skilled in the arts. In one embodiment, sending device 103 
establishes access rights allowing only recipient 102 to retrieve data object 
105' from storage device 109. In an alternate embodiment, sending device 103 
establishes access rights that prevent recipient 102 from retrieving data object 

15 105'. As described below with reference to optional code scanning component 
130, access rights to data object 105' permitting recipient 102 to retrieve data 
object 105' are established only after optional code scanning component 130 
determines that the data object 105' may be retrieved by recipient 102. 

Still referring to FIG. 1, in one embodiment, the communications 

20 network 115 comprises a local area network. In another embodiment the 
communications network 115 comprises a wide area network. In another 
embodiment the communications network 115 comprises a wireless network. 
In another embodiment the communications network 115 comprises an 
Internet. In another embodiment communications network 115 is a cellular 

25 telephone network. 

Again referring to FIG. 1, in one embodiment optional code scanning 
component 130 analyzes data object 105' stored on storage device 109 to 
determine if data object 105' may be retrieved by recipient 102. In one 
embodiment, the code scanning component 130 comprises a server in 
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operative communication with storage device 109. In another embodiment 
optional code scanning component 130 analyzes data object 105' to 
determine if data object 105' contains a virus. By way example and not 
limitation, the virus may be a computer virus, a cellular phone virus, a text 
5 messaging device virus or a personal digital assistant (PDA) virus. Numerous 
methods are known to those skilled in the art for detecting and responding to 
viruses. In one embodiment optional code scanning component 130 deletes a 
virus found upon analysis of data object 105'. One example of a computer 
program to detect and respond to viruses is provided by Symantec Enterprise 

10 Security Manager, available from Symantic Enterprises, 20330 Stevens Creek 
Blvd., Cupertino, CA 95014-2132 

Still referring to FIG. 1, in one embodiment, code scanning component 
130 may analyze data object 105' to determine if data object 105' comprises a 
file type that may be distributed on the network based upon the enterprise 

15 policies. By way of example, and not limitation, many information systems 
store data objects as files with a file name comprised of a leading alpha- 
numeric string, a period, V, and a trailing extension, that is commonly three 
(3) characters long. The determination of whether to further distribution 
distribute files is based upon analysis of the file extension. In one embodiment, 

20 image files are not allowed to be distributed. In another embodiment image 
files further comprising an image of currency, or an image of security marks 
used in the printing of currency are not permitted to be distributed. By way of 
example and not limitation, methods for determining whether an image further 
comprises currency image, or an image of security marks used in the printing 

25 of currency, are disclosed in Zhigang Fan, "Anti-counterfeit pattern detector 
and method," U.S. Patent No. 5,553,144; Zhigang Fan, et. al., "Seal detection 
system and method," U.S. Patent No. 6,067,374; Zhigang Fan, et. al., "Method 
for counterfeit currency detection using orthogonal line comparison," U.S. 
Patent No. 6,181,813 B1; John W. Wu, et.al., "Anti-counterfeit detection 
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method," U.S. Patent No. 6,317,524;and, John W. Wu, et. a!., " Digital imaging 
method and apparatus for detection of document security marks," U.S. Patent 
No. 6,542,629, herein incorporated verbatim and with the same effect as 
though such disclosures were fully and completely set forth herein. 
5 Still referring to FIG. 1, in one embodiment, code scanning component 

130 may analyze data object 105' to determine if a data object 105' comprises 
confidential information. In one embodiment code scanning component 130 
analyzes data object 105' to identify text that is known to corresponding to 
confidential information. Methods to analyze digital data to identify pre- 

10 determined key words are well known to those skilled in the art. 

Again referring to FIG. 1, in one embodiment, the actions of sending 
device 103 performed in accordance with the invention, as described herein, 
are performed by program 106. By a program it is meant implementations that . 
include software, firmware and hardware, including but not limited to ASICS 

15 and PGA's. Multiple methods for implementation of a program are well known 
to those skilled in the art. 

Referring now to FIG. 2, there is shown a schematic diagram depicting 
a representative embodiment of the sending device (reference FIG. 1, 103) 
and program 106 in accordance with the current invention, wherein the 

20 sending device (reference FIG. 1, 103) comprises a message client 200. By 
way of example and not limitation, a message client may comprise a personal 
computer, a cell phone, a text message device, or a personal digital assistant 
(PDA). In one embodiment, sending device 200 comprises an electronic mail 
client device such as a personal computer. In a further embodiment, program 

25 106 comprises an electronic mail client program, and the first message 
(reference FIG. 1, 104) comprises an electronic mail message with an 
attachment, the attachment corresponding to first data object 105. An example 
of an electronic mail client program is Microsoft Outlook™, available from 
Microsoft Corporation, One Microsoft Way Redmond, Washington 980526399. 
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Outlook™ is a trademark registered to Microsoft Corporation, One Microsoft 
Way Redmond, Washington 980526399. 

Referring still to FIG. 2, program 106 comprises a message client 
program 210 in operative communication with a plug-in program 220. 
5 Message client program 210 and plug-in program 212 are in operative 
communication via exchange of messages 240, via their application 
programming interfaces 211 and 212. Numerous methods for communication 
of messages between two computer program are well known to one skilled in 
the art. In one further embodiment, the plug-in component 212 determines 

10 whether first data object 105 is greater than the aforementioned pre- 
determined threshold. In one embodiment, computer program (reference FIG. 
1, 106) further comprises the threshold. In an alternate embodiment, the 
threshold may be communicated by optional local threshold component 230 in 
operative communication with plug-in component 212. In one embodiment the 

15 optional local threshold policy 230 component is a computer program and 
optional local threshold hold policy 231 is a message. In an alternate 
embodiment optional local threshold policy component 230 is a data object 
locally accessible to plug-in component 212, further comprising local threshold 
policy 231. 

20 Referring now to FIG. 3, in accordance with the invention, there is 

depicted a block diagram disclosing an alternate embodiment of the sending 
device 300 corresponding to sending device 103 in FIG. 1. Sending device 
300 comprises a message client 310, for sending a message 304. Message 
304, further comprising data object 305, is resident upon message client 310. 

25 Responsive to sender 101 , message client 310 sends message 304 as 
message 304', further comprising data object 305' via communications 
pathway 311 to message server 320, where it is received as message 304" 
and data object 305". 
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In one embodiment, message client 310 comprises an electronic mail . 
message client. In a further embodiment, message server 320 comprises an 
electronic mail server. By way of example and not limitation, in one 
embodiment message client 310 is a POP3 electronic mail client operating on 
5 a personal computer and message server 320 is a POP3 electronic mail 
server. In a second embodiment, message client 310 comprises a text 
message device. In a third embodiment, message client 310 comprises a 
cellular telephone. In a fourth embodiment, message 310 comprises a 
personal digital assistant (PDA). One skilled in the art will recognize these are 

10 but exemplary embodiments of the invention and recognize alternate 
embodiments thereof. 

Still referring to FIG. 3, in one embodiment network 311 comprises a 
local area network (LAN). In another embodiment network 311 comprises a 
wide area network (WAN). In an alternate embodiment, network 311 

15 comprises a cellular telephone network. In yet another embodiment, network 
311 comprises a wireless network. One skilled in the art will recognize these 
are but exemplary embodiments of the invention and recognize alternate 
embodiments thereof. 

Referring now to FIG. 4, there is shown in accordance with the 

20 invention, a process flow chart describing one embodiment of a method to 
distribute a first message containing a first data object to a recipient, 
comprising: by a device, determining when the first data object is greater than 
a specified threshold; by a device, forming a second data object wherein at 
least a portion of the content of the second data object is equivalent to the 

25 content of the first data object, and storing the second data object in a storage 
device at a storage address when the first data object is greater than the 
specified threshold; by a device, forming a second message without at least a 
portion of the first data object, and forming within the second message a 
reference information based on the storage address when the first data object 
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is greater than the specified threshold; and, by a device, sending the second 
message to the recipient. 

Still referring to F|G. 4, the process flow begins with step 410, forming a 
first message. As previously disclosed with reference to FIG. 1-3, first 
5 message (reference FIG. 1, 104) further comprises a first data object 
(reference FIG. 1, 105). Step 420 comprises requesting the first message 
(reference FIG. 1, 104) to be sent. Means for forming the first message 
(reference FIG. 1, 104) and means for requesting sending of the first message 
(reference FIG. 1, 104) may be any means known to those skilled in the art. 

10 Step 430 comprises determining if the size of the first data object (reference 
FIG.1 , 105) is greater than a threshold value. If the size of the first data object 
(reference FIG.1, 105) is less than the threshold value, the flow chart moves 
from step 430 to 435, wherein the first message (reference FIG. 1, 104), 
comprising the first data object (reference FIG.1, 105), is sent. After process 

15 step 435, the process flow ends. 

Still referring to FIG. 4, if the size of the first data object (reference 
FIG.1, 105) is greater than the threshold, the flow chart moves to step 440, 
wherein a second data object (reference FIG 1, 105') based upon the first data 
object is formed and copied to the storage device (reference FIG 1, 109) at a 

20 storage address. Optionally, during process step 450 sending device 
(reference FIG. 1 , 103) establishes access rights for the data object (reference 
FIG. 1, 105') stored on the storage device (reference FIG 1, 109). As 
previously disclosed with reference to FIG. 1, in one embodiment, access 
rights are established such that there is a reasonable assurance that only the 
; 25 recipient may retrieve the data object 105\ In an alternate embodiment access 
rights are established such that there is a reasonable assurance that the 
recipient may not retrieve the data object 105' until after an analysis step has 
been performed as was described with reference to FIG. 1. 
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Still referring to FIG. 4, during process step 460 a second message is 
formed. In one embodiment the sending device (reference 1, FIG. 103) forms 
the second message by first creating a replica of the first message devoid of at 
least a portion of the first data object (reference FIG. 1, 105). In a further 
5 embodiment, the second message is initially formed devoid of a reference 
information (reference FIG/1, 110). During process step 470 the reference 
information is formed as a part of the second message to complete formation 
of the second message (reference FIG. 1, 104'). In process step 480, the 
second message is sent to the recipient (reference FIG. 1, 102). Moving to 

10 option process step 490, data object (reference FIG. 1, 105') is deleted. After 
process step 490 the process flow is completed. 

Referring now to FIG. 5, there is shown in accordance with the 
invention, a process flow chart describing one embodiment of a method 
comprising: the recipient reading the second electronic mail message; 

15 retrieving the data object (reference FIG. 1 , 105') from the electronic repository 
(reference FIG. 1, 109); and, deleting the data object (reference FIG. 1, 105') 
from the electronic repository (reference FIG. 1, 105'). In accordance with the 
invention, the process flow chart further describes one embodiment of a 
method to determine if the second data object (reference F|G. 1, 105') 

20 comprises at least some digital information that requires application of data 
processing steps and in response thereto, apply said processing steps. 

Still referring to FIG. 5, in process step 510 recipient (reference FIG. 1, 
102) receives the message. Means for receiving the message may be any 
means known to those skilled in the art. In process step 520, recipient 

25 (reference FIG. 1 , 102) reads the message. Optionally, as has been described 
with reference to FIG. 1, in process step 530, optional network scanning 
component (reference FIG. 1, 130), analyzes the data object (reference FIG. 
1, 105') stored on storage device (reference FIG. 1, 109), to determine if the 
data object (reference FIG. 1 , 105') comprises at least some digital information 
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that requires application of data processing steps. By way of example, and not 
limitation, the digital information requiring data processing may comprise, a 
virus, an image file, an image of currency, or confidential information. 

Still referring to FIG. 5, if optional scanning component (reference FIG. 
5 1, 130) determines the data object (reference FIG. 1, 105') stored on storage 
device (reference FIG. 1, 109), comprises at least some digital information that 
requires application of data processing steps, the process flow moves to 
process step 535. As part of process steps 535, optional scanning component 
(reference FIG. 1, 130) performs required data processing, after which the 

10 process flow moves to optional process step 540. If optional scanning 
component (reference FIG. 1, 130) determines the data object (reference FIG. 
1, 105') stored on storage device (reference FIG. 1, 109), does not comprise 
at least some digital information that requires application of data processing 
steps, the process flow moves to optional process step 540. As part of optional 

15 process step 540, optional scanning component (reference FIG. 1, 130) 
establishes access rights to the data object 105' stored on the storage device 
such that there is a reasonable assurance that only the recipient may retrieve 
the data object 105'. 

Still referring to FIG. 5, in process step 540, recipient (reference FIG. 1 , 

20 102) retrieves stored data object (reference FIG. 1, 105') stored on storage 
device (reference FIG. 1, 109) using reference information (reference FIG. 1, 
110) in the message (reference FIG. 1, 104). Means for retrieving the data 
object (reference FIG. 1, 105') using the reference information (reference FIG. 
1, 110) may be any means known to those skilled in the art. After retrieving 

25 the data object (reference FIG. 1, 105'), in optional process step 560, the data 
object (reference FIG. 1, 105') is deleted, after which the process flow ends. 

Referring now to FIG. 6, there is shown in accordance with the 
invention, a process flow chart describing an alternate embodiment of a 
method to distribute a first message containing a first data object to a 
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recipient, comprising: by a device, determining when the first data object is 
greater than a specified threshold; by a device, forming a second data object 
wherein at least a portion of the content of the second data object is 
equivalent to the content of the first data object, and storing the second data 
5 object in a storage device at a storage address when the first data object is 
greater than the specified threshold; by a device, forming a second message 
without at least a portion of the first data object, and forming within the second 
message a reference information based on the storage address when the first 
data object is greater than the specified threshold; and, by a device, sending 

10 the second message to the recipient. 

Still referring to FIG. 6, the process flow begins with step 610, forming a 
first message. As previously disclosed with reference to, FIG. 1-3, first 
message (reference FIG. 1, 104) further comprises a first data object 
(reference FIG. 1, 105). Step 620 comprises requesting the first message 

15 (reference FIG. 1, 104) to be sent. Means for forming the first message 
(reference FIG. 1, 104) and means for requesting sending of the first message 
may be any means known to those skilled in the art. Step 630 comprises 
determining if the size of the first data object (reference FIG. 1, 105) is greater 
than a threshold value If the size of the first data object (reference FIG. 1, 

20 105) is less than the threshold value, the flow chart moves from step 630 to 
635, wherein the first message (reference FIG. 1, 104), comprising the first 
data object (reference FIG. 1, 105), is sent. After process step 635, the 
process flow ends. 

Still referring to FIG. 6, if the size of the first data object is greater than 

25 the threshold, the flow chart moves to step 640, wherein a second data object 
(reference FIG 1, 105') based upon the first data object is formed and stored 
on the storage device (reference FIG 1, 109) at a storage address. FIG 1, 
109). Optionally/ during process step 650 sending device (reference FIG. 1, 
103) establishes access rights for the data object (reference FIG. 1, 105') 
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stored on the storage device (reference FIG 1, 109). During optional process 
step 650, access rights to the stored data object (reference FIG. 1, 105') are 
established. As previously disclosed with reference to FIG. 1, in one 
embodiment, access rights are established such that there is a reasonable 
5 assurance that only the recipient may retrieve the data object (reference 
FIG.1, 105'). In an alternate embodiment access rights are established such 
that there is a reasonable assurance that the recipient may not retrieve the 
data object (reference FIG. 1, 105') until after an analysis step has been 
performed as was described with reference to FIG. 1. 

10 Still referring to FIG. 6, during process step 660 a second message is 

formed. In one embodiment the sending device (reference 1, FIG. 103) forms 
the second message by removing at least a portion of the first data object 
(reference FIG. 1, 105) from the first message (reference 1, FIG. 103). During 
process step 670 a reference information based upon the storage address is 

15 formed as a part of the second message to complete formation of the second 
message (reference FIG. 1 , 104'). During process step 690, the second 
message is sent to the recipient (reference FIG. 1, 102). After process step 
690 the process flow is completed. 



